create a custom role with appropriate record acces...
# administration
s
create a custom role with appropriate record access, role permissions need be based on user's SOD